<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Pentesting on krash.dev</title><link>https://krash.dev/tags/pentesting/</link><description>Recent content in Pentesting on krash.dev</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Fri, 14 Aug 2026 08:29:09 +0530</lastBuildDate><atom:link href="https://krash.dev/tags/pentesting/rss.xml" rel="self" type="application/rss+xml"/><item><title>This is why you need a personal Collaborator Client!</title><link>https://krash.dev/posts/this-is-why-you-need-a-personal-collaborator-client/</link><pubDate>Tue, 22 Jun 2021 00:00:00 +0000</pubDate><guid>https://krash.dev/posts/this-is-why-you-need-a-personal-collaborator-client/</guid><description>&lt;p&gt;If you have used &lt;a href="https://portswigger.net/burp/documentation/collaborator" target="_blank" rel="noopener noreferrer"&gt;Burp’s collaborator client&lt;/a&gt; for your Out-of-band testing, you know it’s awesome. Then why there is a need for a personal collaborator client? There are a few things that need to be addressed.&lt;/p&gt;
&lt;ol&gt;
&lt;li&gt;Companies have started to blacklist burp collaborator’s domain, making it difficult for OOB vulnerabilities detection. (&lt;a href="https://twitter.com/burp_suite/status/1069998639785725952?lang=en" target="_blank" rel="noopener noreferrer"&gt;Read here&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;Collaborator client is not available for the community/free edition of BurpSuite.&lt;/li&gt;
&lt;/ol&gt;
&lt;p&gt;This brings the need for having a personal collaborator client, with no to minimal investments, that will help us in the detection of any out-of-band/blind vulnerabilities, and I have linked an amazing cheatsheet below that will guide in OOB Exploitation. So, let’s get started. Below are the things required for our recipe to cook:&lt;/p&gt;</description></item><item><title>How does burp proxy work?</title><link>https://krash.dev/posts/how-does-burp-proxy-work/</link><pubDate>Mon, 07 Jun 2021 00:00:00 +0000</pubDate><guid>https://krash.dev/posts/how-does-burp-proxy-work/</guid><description>&lt;h2 id="whats-a-proxy"&gt;What’s a proxy?&lt;a class="heading-anchor" href="#whats-a-proxy" aria-label="Link to this section"&gt;#&lt;/a&gt;
&lt;/h2&gt;
&lt;p&gt;A proxy acts as a gateway between you and the internet. The internet traffic flow back and forth if a proxy is setup in the middle. So, what is the need of proxy? There are several reasons organizations and individuals use proxies:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Control and monitor internet usage&lt;/li&gt;
&lt;li&gt;Proxy servers can give better speed and bandwidth by caching websites&lt;/li&gt;
&lt;li&gt;Proxy servers can also be setup along with VPNs to provide anonymity and better security&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;There are different types of proxies, but a specific type of proxy that we are going to talk about in this blog is &lt;strong&gt;interception proxy&lt;/strong&gt;.&lt;/p&gt;</description></item></channel></rss>